Analysis
-
max time kernel
157s -
max time network
164s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 08:25
Static task
static1
Behavioral task
behavioral1
Sample
78f4cb6ed265c721890f28d96e33ce8b2defae0d8c71eaafbbc75199ca270d23.exe
Resource
win10v2004-20221111-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
78f4cb6ed265c721890f28d96e33ce8b2defae0d8c71eaafbbc75199ca270d23.exe
-
Size
1.2MB
-
MD5
64245815b907d80151c520a10f3e83b0
-
SHA1
978170de87dfd5135cf0b3da9fb7900453caf1ec
-
SHA256
78f4cb6ed265c721890f28d96e33ce8b2defae0d8c71eaafbbc75199ca270d23
-
SHA512
280812154ff14668d152552aff58b6c631a7e2c4bcb98b86eea48179957da1b7901d0d32cfcc59ff7d3da65736a95fa32103b292b0da5dcfe0efea619914ec78
-
SSDEEP
24576:DjryZExuywyuvh9AVtjmSNXPIq7k2dzeFuUFOqdD3Gv:DjryZExF/qSN/Iq4eeFXFtD2v
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 3104 632 WerFault.exe 78f4cb6ed265c721890f28d96e33ce8b2defae0d8c71eaafbbc75199ca270d23.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\78f4cb6ed265c721890f28d96e33ce8b2defae0d8c71eaafbbc75199ca270d23.exe"C:\Users\Admin\AppData\Local\Temp\78f4cb6ed265c721890f28d96e33ce8b2defae0d8c71eaafbbc75199ca270d23.exe"1⤵PID:632
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 632 -s 4362⤵
- Program crash
PID:3104
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 632 -ip 6321⤵PID:1408